CVE-2018-15631
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail the…
Published Apr 9, 2019 · updated Jun 17, 2026 · odoo odoo
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.
Timeline
Detection, updates, and resolution for this record.
Apr 9, 2019 · Catalog
Detected
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.
Jun 16, 2026 · Catalog
Updated
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.
Jun 17, 2026 · NIST NVD
Updated
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.
Affected
- cpe odoo/odooversion unspecified
Sources
- CVE.orgCVE-2018-15631
Official CVE identifier
cve.org - FIRST EPSSCVE-2018-15631
30-day exploitation probability 1.4%
first.org - NIST NVDCVE-2018-15631
Improper access control in the Discuss App of Odoo Community 12.0 and earlier, and Odoo Enterprise 12.0 and earlier allows remote authenticated attackers to e-mail themselves arbitrary files from the database, via a crafted RPC request.
nvd.nist.gov - Odoo SecurityCVE-2018-15631
Odoo or OpenERP product vulnerability. Vendor discussion stays on the Odoo tracker.
github.com